Re:DigitalOcean leaks customer data between VMs
by wmf on Monday December 30, 2013 @12:51AM
(#6983248)
I think the issue of defaults is orthogonal to the issue of billing. For example, they could make scrubbing on by default (or even mandatory) and still bill customers for it. Of course they would have to disclose this.
[ Parent
| on HN ]
Re:DigitalOcean leaks customer data between VMs
by jlawer on Monday December 30, 2013 @12:58AM
(#6983268)
I completely agree for the UI. For the API I think it is completely fine to have it not as default (In fact I would argue having a boolean controlling an optional action default to false for an API is the most correct action).
Re:DigitalOcean leaks customer data between VMs
by nitrogen on Monday December 30, 2013 @02:02AM
(#6983458)
In this case one must balance the right API choice with the right security choice. Security wins every time, or at least it should, so the default should be wiping. If one would insist on having API booleans default to false, just change the input polarity (e.g. rename "wipe_disk" to "skip_wipe").